```release-note:bug
core/auth: Return a 403 instead of a 500 for wrapping requests when token is not provided
```