Updated the expected response codes for failed admin api requests

* Modified the check for users taking admin API commands from 400 to
  403. The 403 response also makes much more sense in this situation.

Change-Id: I918b12c6d24e70846bc2004359dd7039572eab9b