[regression] Private RSS feeds with Basic authentication does not work in some RSS clients

This is caused by the fact that the response now has a 403-forbidden status code instead of the expected 401-authrequired. Although normally clients configured to use authentication should just send the credentials, some RSS readers choke when they don't receive a 401 response.