file: invoke error handler in 403 case as well