protected function createUrl(BlockadeException $exception, Request $request)
    {
        //decide where to redirect. login_url for unauthenticated or
        //bad credentials, deny_url for unauthorized or anything else
        if ($exception instanceof AuthenticationException || $exception instanceof CredentialsException) {
            return $this->login_url.'/to'.$request->getPathInfo();
        }

        return $this->deny_url;
    }