cleanup

less-misleading test variable names; apparently `redirect` is already
a shortcut for returning an HttpResponseRedirect and doesn't need
`reverse`; speaking of responses, Django has a named class for 403 so
we might as well use it; README examples on the tip of master should
either be correct as of the tip of master or are better off not
existing