added recognizing of invalid user credentials exception, now status code will be 401 instead of 403