improvments : use pac4j 1.4.0 release, avoid check on content, use AnyContent, better handle 403