add 401 to auth page to force clearance of HTTP basic auth credentials