When AUTH processes a JOIN request and rejects it, it sends back a unicast message to the joiner. However, that message is dropped by UNICAST as the destination is not in the membership !
SOLUTION: use Event.ENABLE_UNICASTS_TO before sending the rejection. (This works in TCP as there is no UNICASR protocol in TCP)