return 403 if pings are disabled, not 500

500 means internal server error, which clients (e.g. bridgy) often interpret as transient and worth retrying. 403 means the server refuses to handle the request, which i think is what we want here.
Merge pull request #27 from snarfed/master

return 403 if pings are disabled, not 500