set 403 Forbidden response after release collection at second time, write a test for this bug