Do not throw UnauthorizedException, just do not log in the user
Merge pull request #290 from VitSalis/fix_session_bug

Do not throw UnauthorizedException, just do not log in the user