Return Unauthorized status code for API calls

**Is your feature request related to a problem? Please describe.**
Currently the API gateway returns redirect status code 304 when trying to access endpoints without authorization.
This should only happen for entrypoints under /.
For API calls like `/api/myendpoint` a status code "401 Unauthorized" should be returned.
This indicates an authorization error to the frontend and avoid redirect loops when calling those API endpoints.

**Describe the solution you'd like**
Change requests to /api/** to return 401 when unauthorized

**Describe alternatives you've considered**
---

**Additional context**
---