Send status 'forbidden' if user is unauthorized for command
HTTP status 'unauthorized' implicates the user can log in to resolve this.