Now that AuthenticationWebFilter handles AuthenticationExceptions, BearerTokenAuthenticationWebFilter is no longer necessary.