Use status code for auth errors