Expect a 401 for unauthorised stagecraft access

This has changed in stagecraft so that we can distinguish between
unauthorised and forbidden.