created simple migration. http 401 logs out users