- added AuthenticationException
- throw AuthenticationException when authenticator realizes it can't go on