Looking at setting up auth using a filter
Corrected the filter path; Setup an exception handler to return 401 & 403
Adding a note to create a test case to test 403 response