Limit the number of retries on 401

[Mihály Lengyel]

• Limit the maximum number of retries on unauthorised response
  • This should only matter in case the backend returns a 401 even after a session refresh
  • This points to a coding error, but still - an infinite loop is bad
• Add a hard-to-miss error to the console to aid in debugging the issue