Return upstream status codes for authentication, etc.

Upstream status codes (such as login failures) are swallowed and 500 errors are returned instead.  This simple change passes on the upstream status code instead.  Updated and tested locally to confirm that I get a 401 status when logging in with invalid credentials.