add logging of 403 and 401 errors

[dgauldie]

Description

• Include a summary of the changes and the related issue.
• Include relevant motivation and context.

Resolves #(issue)

[dgauldie]

I tested that 401 and 403 errors get logged manually. If anyone feels up to writing unit tests for these new logging handlers, that would be great

[bigglesandginger]

KeycloakJwtAuthenticationConverter.extractResourceRoles() checks to see if the user "isDirty" and if so updates the database (setting the user record and deleting all roles then adding all new roles)... will this fix the issue or make the issue revert to the old issue that PostGres will become hammered with database calls for every single request issued... (what the caching fixed)?