return 401 status code in case wrong x-auth-token