antoniop
committed
on 17 Jun 21
Prefer returning forbidden, unauthorized actually asks for authentication