Add the 401 Unauthorized when no username is detected, thus no user
is logged in. This is the most basic form of permissions, where any
user can log in and do anything.