Bugfix: get_context_data() fails

get_context_data() fails because self.object does not yet exist.
There's no need to create an unused context when returning
HttpResponseForbidden.