Change invalid auth to return 401

For each request, the USS-API uses the DrupalOAuthService to validate tokens. This service returns 403 errors. The USS endpoints should instead return a 401. A custom exception has been added to facilitate this change.