Raise SignatureDoesNotMatch for unauthorized requests

HTTP_UNAUTHORIZED is returned only when the given signature is wrong.

Change-Id: I4353557c6826ded2157b3a5be2e1ec1850477958