session does not trigger error 401 on logout