v0.2.9.  Now authorization errors for anonymous return 401 vs 403.