Better error code (401) and message (JSON) when unauthed