I don't like wrapping with AuthenticationException because it would needlessly wrap AuthenticationException inside another. I'll consider pulling up the log statement into the superclass which is arguably the cleanest solution all around.