My handleSecurityExceptions() method always returns a HTTP error status of 500 to the client when not requesting JSON (such as when requesting HTML). I am making a wild gues