Rectify status codes for not authorized and not authenticated
Merge pull request #35 from fernandoacorreia/rectify-401-403

Normalize FORBIDDEN vs UNAUTHORIZED responses