refractor not authorized to return 403 in case of xhr requests
set pawns in view and render from there