return "403 Forbidden" if authentication token was given, however is invalid