Return 401 Unauthorized for missing/invalid API keys (per RFC 7235); 403 is reserved for valid-but-forbidden credentials. Signed-off-by: Stephan Meijer <me@stephanmeijer.com>
Return 401 Unauthorized for missing/invalid API keys (per RFC 7235); 403 is reserved for valid-but-forbidden credentials. Signed-off-by: Stephan Meijer <me@stephanmeijer.com>