send http 401 on "forbidden" pages, refs #829 and #830