halt if no user
Add halt 401 msg
change response msg
add status code 401