Handling unauthenticated requests with AuthenticationEntryPoint