Add custom attribute to give a HTTP 403 status code when user not authorized
custom errors set to RemoteOnly
Merge commit '2819ba5cc22c1f72f5b9949964af61c54307f949'