add retry logic

[noahdietz]

• if first API call encounters 401, prompt user to login, retry once
• moves API calls to separate function