Fixed 403 return code when si authenticated but doesn't have proper role. fixes #164