Changed reported status code to forbidden, as unathorized prompts HTTP auth dialog