[3.0.7 backport] Avoid leaking information about database existence on public API

Requesting a db endpoint as a non-existent user returns a different result depending on whether the database exists.  

An existing database returns a 401, while a non-existing database returns a 404.

It should return a 401 in both cases.