updates to auth status code

properly returns a 401