SECURITY: redirectFailedAuthentication in AuthenticateTokenFilter.java enabled to redirect on unauthorised