Use ENV, fixes uninitialized constant Rails (NameError)
Test cases for forbidden webservice requests