Repeat log in attempts for base http auth

To allow users additional log in attempts we need to return status 401 instead of 400 on login failure