Expose authorization header error with federated queries

[yavyx]

As of now, an error is posted on the logs when federated queries lack an authorization header, but it's not exposed in the API response making it difficult to the user to know it's missing. The API response should include this message too.