PAINTING

A 401 Unauthorized response cannot trigger a browser redirect, because redirects require a 3xx status code; browsers ignore Location headers sent with 401.