http: return correct error code to obtain authorization, fix http_access_verify_channel - mask check