HTTP 403 when unauthorised

And moved to the ExceptionController, not in HomeController, to make it consistent with the other errors.
minor stylist review changes

no big deal