Now, on auth fail, returning 403 permission denied instead of redirecting. Also refactored most views.