Are you seeing a 302 redirect with the body including "You are not authorised to view this resource" :?