better amapche HTTP return codes for expired sessions.

(see also https://github.com/owncloud/apps/pull/1175)
It's not pretty clear, but I guess http://ampache.org/wiki/dev:xmlapi:error says that 401 is the more appropriate HTTP error for an expired session.