Add test cases for top level wildcards

Just to ensure it works.
Return a 403 Forbidden error page rather than 404
Merge pull request #1 from wilr/master

Return a 403 Forbidden error page rather than 404.