update global sync-error-handler to only log the user out if a 401 happened
use USER endpoints with IDs where necessary
clean code