Remove old edw_key code (still using edw_hash though.)
Return 401 Unauthorized whenever an incorrect authorization header is sent.