improve forbidden user message