properly generates UnAuthorizedError
Rack middleware goes after Warden::Manager if Warden auth is used