If not allowed, No echo, but send a 401

Implemented Denis Chenu's suggestion