Added <x-login> element and routing that reacts to 401 responses