Added proper 403 response to API views