Fixed copy paste errors in log statments.
Changed API to return 403 'forbidden' when the request is not authorised and changed entire API to use koa's text http status codes for readability.