Returning 401 'Unauthorized' when no access_token is provided