[#6701] Return 401 Unauthorized instead of 403 Forbidden when anonymous access is denied to force client to prompt for auth

Signed-off-by: Cory Johns <cjohns@slashdotmedia.com>