added logic to propagate status codes
respond with 401 when password isn't provided