Allowing custom responses and redirects for permission failures (Closes #139)