use 403 as response code for non-authorized requests instead 401 to prevent a basic auth dialog in safari 7