set the session to the login request during a unauthorized exception event