Adding 401 tests for authenticated client
logout only if /oauth/token returns 401