Modified forbidden() and unauthenticated()