Return 401 if token is null