is
Google answers an expired/mismatched session= with HTTP 400, not 401/403, so fold it in — otherwise a timed-out session never triggers recovery.
Google answers an expired/mismatched session= with HTTP 400, not 401/403, so fold it in — otherwise a timed-out session never triggers recovery.