"Forbidden" should ideally be implemented through Apostrophe such that apostrophe-second-chance-login has a chance to work

[boutell]

A good ticket for next release.