'Returns a standard WSGI response callable with the status of 403 or 401
depending on whether the REMOTE_USER is set or not.'

def denied_response(self, req):

    if req.remote_user:
        self.logger.increment('forbidden')
        return HTTPForbidden(request=req)
    else:
        self.logger.increment('unauthorized')
        return HTTPUnauthorized(request=req)
