Throw AuthenticationException instead Exception