send 403 if we can't find a tictail user
remove render index function