Deny access by Drupal instead of passing on blank 401