If AccessDeniedException occures, throw UnauthorizedException in getSessions()