redirect to login and clear auth if server returns a 401