send better responses when unauthorized etc.