return 401 http status code for authentication problems

Why not extend from `UnauthorizedOAuthErrorException`?