authenticationFailureHandler: the prop 'accountLockedUrl' is irrelevant when working with REST