no-redirect FxA login flow (bug 1054020)

this is a little cryptic. Can you add a brief comment about what these 403s are meant to simulate?