More specific error returned when assertion doesn't match authorized user