Allow custom message for AuthenticationException

… and for AccessDeniedException. Preserves default messages.