Send 401 response, when neither accessToken, nor authorization header