Correct some incorrectly renamed entries
Fix 500 instead of 401 on bad HTTP authentication

Code optimistically assumed that authentication would fill out data to
pass to authorization, which does not get filled out if authentication fails.