Make api only return json for authorization errors
New 403 error