handle forbidden request to iDT API
fix broken refresh on /complete triggers an error