don't unhelpfully explode when login fails for non-401 reason