change permission check failure to 403 (from 404)
update installation instructions (separate db config file)