Correctly turn 401 responses into UnauthorizedAccessExceptions