For invalid login return 401 response rather than exception