Emit AccessDenied for empty Authorization header