raise specific error if authorization wasn't verified