add fake api server (nodejs+express)
redirect on 401 to login page