Actually send 403 code

`403` page is displayed here but the `404` status code is sent. This patch correct the status code to the expected `403`.