Don't retry all 401's and add a session handler

Don't retry all 401's and add a session handler #12