fix timed out sessions producing server errors

[ohnoitsaustin]

AuthenticationExceptions were being converted to HttpExceptions, rather than being ignored and redirecting to the login page