revert RESTWS-438 and RESTWS-433
(revert back so that the browser returns a 401 upon an authentication error)