ENH respond 401 for bad credentials