Catch and Re-Authenticate

Requests just re-use a connection rather than re-authenticating each time. If the token times out, the response could still be an HTTP 200 but a login page. The API doesn't detect that at the moment.

The key information is knowing how to detect that it's a login page and we need to re-authenticate. Then the call from the Endpoint will need to trap that and re-authenticate the client.