only authinticate on 401 responses