It will be better if we can show a specifc message, rather than a generic authorization required exception, to the user. The message can be shown in the eperson-main.jsp like as you have done for "Reset password email sent" or in a new adhoc jsp