Return HTTP401 for non fresh login

Linked to discussion on #184