got 401 working for requests without being logged in