add render of 403 error page for unauthorized requests
add json response on unauthorized requests