http monkey patch, redirects to custom 401