onUnauthorized
Default handler for authentication failures.
A route-level onUnauthorized passed to authenticateWith overrides this handler. If both are null, Session authentication sends the default challenge described by this configuration.