CMF 2.3 is "stricter" about Unauthorized exceptions, and will always
redirect to the login page.

cf commit c3bde10e