Differentiate between no credentials (401) and invalid credentials (403).