Added an ExceptionMapper that sends: '401 Unauthorized' when
authentication cannot be completed (no credentials provided or bad
credentials provided) and '403 Forbidden' when user is not allowed
to access the resource.