Better security with 401 exception