Add 403 page template

http://manage.dimagi.com/default.asp?128427

Added a template page for 403 errors. Uses the same text as before, but in the same template as a 404.
The standard practice is to raise instances (`PermissionDenied()`) rather than classes (`PermissionDenied`), even though python (at least python 2) does not complain in either case.