Abort with 403 from `ensure` if not authenticated