I keep getting 403 "forbidden" with an authenticated request

You’ll need to edit the config/plugins.js file in your source.