proper exception handling for unauthorized users