fix typo in error message and change error code to 403