Don't redirect to /login

We want to get 401s for unauthorized calls via heroku-proxy.