Returns a 401 if the auth header is missing

[#73644856]