Raise a HTTPUnauthorized error when the server responds with a 401.

Fixes #691

This allows clients to retry after e.g. looking up or prompting for credentials. It also allows them to manage their own strategy wrt retries or trying different passwords.