Add unauthorized_entity to authenticate_for's default for called by callback

[sakuraineed]

fixes #228

I'm having the same problem described in issue. This fix would make expected behaviour as the doc suggests.