support automatic re-login when HTTP session expires