introduce authentication required handler

This handler is invoked if a route/state is activated that requires an authenticated user but there is none. It defaults to a handler that prevents the route/state change to happen and transitions to the login route/state.
introduce access denied handler

This handler is invoked if a route/state is activated that the current user does not have access to. It defaults to a handler that transitions to the default route/state.