fix error: we should send 401 in case of authentication failed, but previously it sent 200...