added unauthorized error header