default auth fail code 401