re-authenticate on 401