Add `on_auth_fail` callback (#7039)