Return 403 when user is unauthorized

These changes disallow the continuous retries and provide for
significantly better behavior when used with Chrome

Fixes stnoonan/spnego-http-auth-nginx-module#9
Update ChangeLog and README