Return 401 when login fails