Matt Chamberlin

@harshach Is this ok to merge now? I've addressed the comments and the failing tests look unrelated.

> My suggestion would be to change the catalog implementation to send 419 instead. The [REST spec](https://editor-next.swagger.io/?url=https://raw.githubusercontent.com/apache/iceberg/main/open-api/rest-catalog-open-api.yaml) specifically calls out 401 as UnauthorizedResponse and 419 as AuthenticationTimeoutResponse Good point, I...

@kevinjqliu @sungwy Given the decision on https://github.com/apache/polaris/issues/791, I am re-opening this PR.