responds with 401 if no auth provided