Render nothing with forbidden (403) status for js, json & xml
Use ENV, fixes uninitialized constant Rails (NameError)
Test cases for forbidden webservice requests
Merge pull request #3 from sutanto/feature/forbidden-status

Render nothing with forbidden (403) status for js, json & xml requests