401 error for unauthorized API calls from client side
Merge branch '401-for-api'