Missing user get's response unauthorized instead of not found

When authorized user do:

```
GET api/users/<user_id/
```

with user that does not exists it get's 401 - unauthorized. 
Wouldn't be correct to respond with 404 - Not found ?
