using HttpException instead ForbiddenException
fixed id of javascript