baseline: single failure of 401 without extra check