If the user doesn't supply the correct headers, return an unauthorized_response