I understand this request implies security risk

Is there any way we can improve the 401 - response when the firewall blocks authentication?

I think the API gives a 401 when it probably should give a 403 if the firewall is the issue.

Ben