Changed the return codes to 403: Forbidden