create custom exception handler to return 401 for non-authenticated users, DRF defaults to 403 for SessionAuthentication
use angular interceptor to detect 401 and redirect to login page