Error message should be changed to 401 instead of 400 when a user is not part of authoriz [RTFACT-21762]