fix(HTTP): Send 403 Forbidden response in exitForbidden() (closes #4840)