Add another blank line before additions
Add forbidden response view

We also made the .jade templates extendable so that other controllers
can extend them for their own invalid paths and unauthorized access.