add error message if user is forbidden

In response to [strider#403](https://github.com/Strider-CD/strider/issues/403).