fixes #3475 - make it possible to force the 401 status.
fixes #3475 - only allow the 401 status code to avoid completely random statuses from being passed in.