fix: #12 Send right HTTP code when token expired

Use response.send() instead of end()