tests: `UserForbiddenError` instead of `NotAuthorized` #4

#LMAO