add ServiceUnavailableException handling to auth for 503 instead of 500 ...

...when in r/o mode