added interceptor for 401 errors; now broadcasts login/logout/auth failure