Don't put in TODOs and also disable them from being counted.
(I realize that you're following a pattern already established in this method in the code base but it's not a good one!)

Would it be handled if you also return status=401 within your json response?