login returns http status 200 if authenticated and 401 is not authenticated