abstract out GET_FORBIDDEN in tests; send 403 Forbidden for most errors
Add test for alternate methods being used on GET-only routes
Merge pull request #3 from thenewtricks/403-forbidden

Change errors to 403 Forbidden