authorisation failures result in traceback

[oliver-sanders]

API requests which fail authorisation result in traceback.

E.G. if user_a only has READ permissions, but they try to stop a workflow, the request will be denied, but traceback will be printed to stderr and will appear in the logs.

We should try to make this appear more nicely.