HTTP Auth: Use exception instead of exit for flow control