configure authorization failure with a lambda instead of a singleton ActionResult