Allow custom exception message for @Security annotation

Custom exception messages are essential to generate customized exception and error page views. Default message is not always acceptable to be displayed to the end user at least because of disclosing security expression used to restrict access.