make sure we return a correct hub message when unauthorized