Raise unauthorised as we want the user to return here after login