Return HTTP 403 on REST API authorization failures

 
{
  "status" : 403,
  "message" : "The authenticated user is not authorized to perform the requested operation"
}