Changing NotAuthorized to extend ActivitiException
Fixed missing userName arg.