Extend XWS error to accept FORBIDDEN errors as AccesDenied

Some API calls return "FORBIDDEN" message when access is denied. This PR is aimed to handle both message types for this kind of error