Use LoginManager unauthorized() method - better failure handling.