Now that `AuthenticationWebFilter` handles `AuthenticationException`s, `BearerTokenAuthenticationWebFilter` is no longer necessary.