add separate exception for not authorized