Properly handle a 401 response and indicate the provided credentials are

unauthorized.