Move NotAuthorizedException into own file so it can be reused