Make sure fail authentication responds with nothing