fix auth url
respond with 401 when no token in ajax req