minor #3422 [Cookbook][Custom Authentication Provider] add a note of …

…warning for when forbidding anonymous users (cordoval)

This PR was merged into the 2.3 branch.

Discussion
----------

[Cookbook][Custom Authentication Provider] add a note of warning for when forbidding anonymous users

| Q             | A                   |
| ---           | ---                 |
| Doc fix?      | yes                 |
| New docs?     | no                  |
| Applies to    | 2.3+                |
| Fixed tickets | #3212               |
| License       | CC-ASA 3.0 Unported |

 Sent using [Gush](https://github.com/cordoval/gush)

Commits
-------

244d756 add note when forbidding access to anonymous users on custom authentication provider

cookbook/security/custom_authentication_provider.rst

@@ -182,6 +182,13 @@ a 403 Response is returned.
     does not require maintaining authentication sessions or login forms, it
     won't be used for this example.
 
+.. note::
+
+    Returning prematurely from the listener is relevant only if you want to chain
+    authentication providers (for example to allow anonymous users). If you want
+    to forbid access to anonymous users and have a nice 403 error, you should set
+    the status code of the response before returning.
+
 The Authentication Provider
 ---------------------------