src/Exceptions/ApiExceptionHandler.php
public function handleAuthorizationError(\Exception $e)
    {
        $e = new AccessDeniedHttpException($e->getMessage(), $e);
        return $this->handle($e);
    }
public function handleAuthorizationError(\Exception $e)
    {
        $e = new AccessDeniedHttpException($e->getMessage(), $e);
        return $this->handle($e);
    }
Security gateway throws AuthorizationException without HTTP code set.
Render AccessDeniedHttpException instead to produce 403 HTTP code instead of 500

@param \Exception $e Original exception to wrap and handle
@return Response