Session service and 401 response interceptor