As a user of the swatch-contracts API, I'd like to be able to distinguish between cases when auth was not provided, and when auth failed. This is possible by following https://quarkus.io/guides/security-built-in-authentication-support-concept#how-to-customize-authentication-exception-responses 

• current behavior is 401 with no details
• expected behavior: 
  • both human readable message, and machine-readable code