fix 401 return status if user is not authenticated
fix: user is never logged in at login page