Return 401 Unauthorized instead of 403 Forbidden if user is not logged in