Add session timeout catch, clear of cookie

differentiate login, auth and session refresh by dynamically setting
the url used by backbone.
catch session timeout errors and clear cookie