Add forbidden error.

Will be used in subsequent PRs that add authorization.
Merge pull request #1833 from erictune/authz

Add forbidden error.