Added the AccessDeniedError type

For when you try to access a route you don't have the rights to.
override serialize to put context `denied`