Request with expired oauth token results in 302 with redirect to /login

## Request with expired oauth token results in 302 with redirect to /login

Redirecting to /login does not make sense for an API.  A 401 should probably be returned instead.