return 403 for dangerous user agent