Secure journal creation

https://www.pivotaltracker.com/story/show/83870580
and
https://www.pivotaltracker.com/story/show/83870456
Status 401 is Unauthorized. 403 Forbidden is more appropriate here.