Optionnaly throw AuthenticationException instead of sending to message
handler.