return head 401 if wrong user calls accept_answer

Since this is only ever called from javascript the redirect is
not needed