<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <title>Forbidden</title>
  <style>
  * { box-sizing: border-box; }
  body { margin: 0 auto; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; font-size: 18px; width: 18em;}
  html { width: 100%; height: 100%; }
  pre { white-space: pre-wrap; background-color: #f8f8f8; padding: 0.5em; }
  </style>
</head>
<body>
  <h1>You need access</h1>
  <p>
    {% try %}{% set xsrf = handler.check_xsrf_cookie() or True %}{% except %}{% set xsrf = False %}{% end %}
    {% if handler.request.method not in {'GET', 'HEAD', 'OPTIONS'} and not xsrf %}
      Your app sent a {{ handler.request.method }} request without an XSRF cookie.
    {% elif handler.current_user %}
      You are logged in, but as a user that cannot access this page.
    {% else %}
      You <strong>are not</strong> logged in.
    {% end %}
  </p>
  <p>Contact the app owner.</p>
  <pre>HTTP 403: Forbidden</pre>
</body>
</html>
