Adds spec for disabled REST API
Sends 403 if API login disabled
Changelog
Merge pull request #858 from opf/fix/api_different_response_for_missing_api_3116

[FIX] API different response for missing api 3116