HttpResponseForbidden instead of HttpResponseNotAllowed
Return 403 if anonymous_edit_url has bad signature