Implementation of a custom UserChecker, which checks after authentication if the user is authorized to use services. The return to clients after the failure of such a general authorization should give information about the reason why authorization for use is denied after successful authentication. This includes reasons such as a non-activated user account, for example, because the account activation email was not confirmed by the user.