Send HTTP 401 on invalid token