Use 401 in place of 403 response

ENG-121 ENG-55