401 status is for invalid_token, not insufficient_scope
Merge pull request #186 from ushahidi/resource-server-correct-http-error

Send HTTP 401 for invalid_token, rather than insufficient_scope