Change status to 401 when not authorized.