Clear auth when API returns 401, close #24