set token to null if get 401