Throws specific exception for denied entry to a cluster

Throws ClusterEntryDeniedException instead of the more generic
IllegalStateException, where CEDE extends ISE. This is so that it can be
caught specifically without resorting to looking at exception message.
Merge pull request #1562 from tinwelint/1.9-specific-denied-entry-exc

Throws specific exception for denied entry to a cluster