customize Post-Auth-Type REJECT