add forbidden_view_config for all 403 errors, update logout view to not require authenticated permission