A SOC engineer writes a Python script to pull alerts from a threat intelligence REST API. Instead of the expected JSON alert data, the script receives an HTTP 302 status code with a 'Location' header pointing to a login portal, and the body contains HTML. What is the MOST likely cause and correct interpretation of this response?