forbid index listings for real (at least in Apache, IIS eh who knows)
rm incorrect status code in title
Merge pull request #540 from Trott/403

Don't say 403 when we're sending a 200