return 401 instead of 200 for authentication so that it hopefully ends
up as a direct message in slack