Update header for when user is denied access to resource