Unauthenticated requests - 401 vs 403 responses

WIP - Still needs proper handling in View.handle_exception, and tests