adding access denied error to non-xml api requests refs #296