change HTTP 409 to 401 for api/provision