Change errors to 403 Forbidden

403 Forbidden because we don't want people poking around the server—this isn't supposed to be a public interface of any kind and we won't dignify them with a response unless they're giving us the proper key.

Closes #2.