missing HttpResponseForbidden import :(

This must have been lost during merge conflict resolution, as this was tested thoroughly before the control_panel check checkin.

Nonetheless, we have a missing import that is hit when a PermissionDenied exception is thrown.  Adding it to the import list fixed everything!