Authorization denial handlers

Todo

Talk about denial handlers and the default one.