Change lockdown api response to Forbidden

fixes assembla-454 aside from maybe the content