Expect a 401 for unauthorised stagecraft access

This has changed in stagecraft so that we can distinguish between
unauthorised and forbidden.
Merge pull request #35 from alphagov/fix-stagecraft-smoke-test

Expect a 401 for unauthorised stagecraft access