added 403 support

A default `403.html` page can now be created in `$webroot`. If there is no such file, information on the error will be displayed in HTML format.