[BUGFIX] Set correct HTTP header when page access is denied