invalid applicant ID returns 403 forbidden