add data to UnauthorizedError so that more information can be returned to client