adding 403 as possible response code to trigger a loginRequired event

the HTTP spec does not specify 403 as a valid response code for requests that require authentication, but the Django server (and maybe others?) sends 403 for requests that failed because the user was not authenticated