Handler for access denied to an authenticated caller.
Defaults to ForbiddenHandler.DEFAULT (HTTP 403).