WebApplicationException is thrown from https://github.com/CruGlobal/conf-registration-api/blob/master/src/main/java/org/cru/crs/auth/CrsUserService.java#L81. Were you expecting it to be UnauthorizedException?
I could catch the exception and examine the status code in particular.