@Test(expected = AccessDeniedException.class)
public void authenticatedRequestGrantsDenied() throws Exception {

  offramp.setAuthorities(singletonMap("AUTHORITY", emptySet()));
  doReturn(true).when(authentication).isAuthenticated();
  doReturn(singletonList(new SimpleGrantedAuthority("AUTHORITY"))).when(authentication).getAuthorities();
  try {
    underTest.checkAuthorisation(authentication, ROAD_NAME, singleton(PII));
  } finally {
    verify(metrics).increment("road1", AUTHENTICATED, UNAUTHORISED);
  }
}