Set UnauthorizedError status code to 401

So Express.errorHandler can handle it to return 401 Unauthorized Error instead of 500 Internal Server Error (issue #1)