Pass back information on how a user may authenticate on authorization failure