WebUI: Set correct HTTP Content-Type in case of forbidden access

The error message is an utf-8 string. With no charset specified,
web browsers will likely use the wrong one making reading the message
in some languages impossibile.