forbidden and redirect are both ok in this case
version 0.1.21