handle 401 response code (fix auth header expectation)