If a user is signed in but not authorized, an access denied page can be clearer than sending them back to login.