Make middleware report when auth fails.
Handle change from IList to IEnumerable.