This should probably raise a 401 exception