adding missing test for 403 response

This was giving me trouble last night. Had @whit537 walk me through the logic on [IRC](https://botbot.me/freenode/gittip/msg/5793976/).