add AuthenticationFailure exception