Now 401 unauthorized also tracks username \m/