Begin of the insertion**As an** OpenProject admin
**I want** the server to return on failed login attempts 401 Unauthorized rather than 200 OK
**so that** Fail2Ban and similar tools can work by default with OpenProject.

Context by Dalibor Sojic:

>End of the insertion I have nginx in front of openproject:6000. The same story is with default apache configuration. Begin of the insertion
>
>End of the insertion Begin of the deletion

End of the deletion Wrong login credentials respond with http 200 header instead 403. 200 OK for wrong credentials can not be integrated with fail2ban. Begin of the insertion
>
>End of the insertion Begin of the deletion

End of the deletion It would be nice if we can integrate it with fail2ban to increase security and decrease uncecessary server load caused by brut force.