changed the authhandler's HandleUnauthorizedRequest method implementation