diff --git a/server/http.go b/server/http.go
index f90668916817663e2662c13325d5f1bb241cf70f..8342edf6edb12238ea3b3b0423d94e817affdc1a 100644
--- a/server/http.go
+++ b/server/http.go
@@ -212,7 +212,7 @@ func (h *Server) handleHomepage(w http.ResponseWriter, req *http.Request, sessio
 			// service, because the 'g' parameter is untrusted at
 			// this stage.
 			if len(groups) == 0 {
-				http.Error(w, "Unauthorized", http.StatusUnauthorized)
+				http.Error(w, "Forbidden", http.StatusForbidden)
 				return
 			}
 		}