Use AuthFailed rather than Refused as exception