Use AccessDeniedHttpException exception to forbid the access