403 status code if auth fails on ws handshake

e.g. auth_tkt cookie is invalid