How to disable the login prompt when csp session is expired and just return http status 401?