Better error handling for the API

[backjo]

Right now, the API just returns the HTML document for the login page. It'd be more useful to return an HTTP 401 XML document containing error data(error code, message, etc). At the moment, the only real area that could use this would be the authentication/permission checking.