Respond correctly when denied authorization