[PATCH aeolus] Return 401 on unauthorized xml request