Denying user from authentication