Return 401 on no session id