Fixed '401 Not Authorized' not being thrown when _authenticate fails