handle access denied (#3)
refactor access denied (closes #3)