Fixed issue#764: Use correct HTTP status code for expired sessions

Changing HTTP status code for expired sessions from 200:OK to 401:unauthorized.