auth: Consider AccessDenied thrown in SSO process