set 401 HTTP status code for the login page