adding 403 as possible response code to trigger a loginRequired event

the HTTP spec does not specify 403 as a valid response code for
requests that require authentication, but the Django server sends 403
for requests that failed because the user was not authenticated