Comment on Use AccessDeniedHttpException exception to forbid the access