403 status code added

The API will now return 403 Forbidden when a non-admin user tries to
perform an admin action.

This code is required to handle auth errors correctly on the UI side and
not log off users on 403.

Change-Id: Ib684f6271b8ca8d460075e4f0c56fb754a965b7d
Merge "403 status code added"