handles unauthorized callbacks

- [x] Pins to latest SDK version
- [x] Removes component shrinkwrap
- [x] Handles auth cases where no user session / token exists