Catch 400 auth errors and set user status to NOT_AUTHORIZED.