Use simple 401 Unauthorized response for json requests without valid session.
Bump version to 0.0.2.