ux: 'better' access denied page, code cleanup