added custom failure app

The custom failure app will save the unverified user in the session and redirect to special endpoint; this allows us to show a custom page explaining to the user they need to authenticate once more and trigger custom actions.
bump version