added an access denied response template, unit tests updated