Forbid users from editing other users.

Introduces the new Forbidden exception that causes the server to return
a 403.