Minor fix: 404 -> 403 for unit test
Merge branch 'dev-forbidden' into develop