returning access denied for when someone tries to use the api without being logged in