Return a 403 status with a message instead of a 422