change code to HTTP_UNAUTHORIZED