resource api only receive 403 http code, don't redirect to login page