Change logging as identity is a val on the class
Override sendForAuth to return 403 Forbidden for AJAX requests through
implicit isXmlHttpRequest