Set UnauthorizedError status code to 401

So Express can handle it to return 401 Unauthorized Error instead of 500 Internal Server Error