Remove unnecessary UnauthorizedException and make ApiAuthException compatible with HttpExceptionInterface. Move the creation of a rsponse for the exception from ApiAuthenticate middleware into the application exception handler.