401 errors are usually caused by network errors or environment variables, but there seem to be rare cases like this.
i seemed to have in ~/.netrc credentials for huggingface.co, which i think they might have overridden my Authorization header.
a smiple rm ~/.netrc did the trick