/me gives 403 when not logged in