Return Unauthorized instead of server error

Keystone returns server error for tenant if user has
no roles in it. It should return Unauthorized instead.

Issue: altai-112
Change-Id: I3e1dec8fcca68935667cb279bfd3a690a72c639b