on whoami not authorized response, clear session
bumps version to 0.1.4