Now `Authorizer.handleAuthenticationFailure` is unused.  Maybe remove it?