Provide a custom permission denied handler setting (e.g. redirect_to_login)
Pass along the entire request to to the handler so that it can decide
whether to redirect or simply deny the user
Merge remote-tracking branch 'custom-permission-handler/custom-permission-denied-handler'