Minor fix: 404 -> 403 for unit test