[tempcommenttt]

I have a production API where sending 401 immediately kills your session and you’re logged out. And 403 doesn’t. We have this as a result of race conditions where the front end incorrectly thinks it still has a valid session. But the back end knows better

[BWStearns]

I like the 401->autokick back to homepage pattern.