XHR: Force redirect to login if session is expired

resolves #5507