helper deny_with_message => sub {
  my $self = shift;
  my $message = shift;
  $self->app->log->warn($message);
  $self->render(
    status => 401,
    text   => 'unauthorized',
  );
};