Allow user-defined error status of verifyClient

Right now verifyClient can only return 401, but other codes
might be more appropriate, so allow the caller to specify them.
Do not force the user to pass the status name

Do this while allowing a custom status name.
Merge pull request #297 from e3c/flexible-verifyclient

Allow user-defined error status of verifyClient