This was the implementation previously in the default exception handler. I moved it here since this approach of having a login command and session certificate is specifically for the admin client. The default was changed to spit out a basic "You're not authorized" message.