Support nested entity_id attribute in requests that return HTTP 401 not authorized