Better authorization error handling