Return a 403 if a view class's is_accessible() returns false.

`BaseView.is_accessible()` says: Override this method to add permission checks.
This means that it should return forbidden since the item exists but you
are not allowed to see it.

Also add missing `>` to the final URL in README