diff --git a/src/main/java/com/commafeed/frontend/rest/resources/FeedREST.java b/src/main/java/com/commafeed/frontend/rest/resources/FeedREST.java
index c56b385c..1232bbdc 100644
--- a/src/main/java/com/commafeed/frontend/rest/resources/FeedREST.java
+++ b/src/main/java/com/commafeed/frontend/rest/resources/FeedREST.java
@@ -450,7 +450,7 @@ public class FeedREST extends AbstractResourceREST {
 		}
 
 		if (StartupBean.USERNAME_DEMO.equals(getUser().getName())) {
-			return Response.status(Status.UNAUTHORIZED)
+			return Response.status(Status.FORBIDDEN)
 					.entity("Import is disabled for the demo account").build();
 		}
 		try {
diff --git a/src/main/java/com/commafeed/frontend/rest/resources/ServerREST.java b/src/main/java/com/commafeed/frontend/rest/resources/ServerREST.java
index d4df7350..3401825c 100644
--- a/src/main/java/com/commafeed/frontend/rest/resources/ServerREST.java
+++ b/src/main/java/com/commafeed/frontend/rest/resources/ServerREST.java
@@ -35,7 +35,7 @@ public class ServerREST extends AbstractResourceREST {
 	@Produces("image/png")
 	public Response get(@QueryParam("u") String url) {
 		if (!applicationSettingsService.get().isImageProxyEnabled()) {
-			return Response.status(Status.UNAUTHORIZED).build();
+			return Response.status(Status.FORBIDDEN).build();
 		}
 		
 		url = FeedUtils.imageProxyDecoder(url);
diff --git a/src/main/java/com/commafeed/frontend/rest/resources/UserREST.java b/src/main/java/com/commafeed/frontend/rest/resources/UserREST.java
index 0508dbfd..ec1772b5 100644
--- a/src/main/java/com/commafeed/frontend/rest/resources/UserREST.java
+++ b/src/main/java/com/commafeed/frontend/rest/resources/UserREST.java
@@ -128,7 +128,7 @@ public class UserREST extends AbstractResourceREST {
 		}
 
 		if (StartupBean.USERNAME_DEMO.equals(user.getName())) {
-			return Response.status(Status.UNAUTHORIZED).build();
+			return Response.status(Status.FORBIDDEN).build();
 		}
 
 		user.setEmail(StringUtils.trimToNull(request.getEmail()));
@@ -167,7 +167,7 @@ public class UserREST extends AbstractResourceREST {
 	public Response delete() {
 		if (StartupBean.USERNAME_ADMIN.equals(getUser().getName())
 				|| StartupBean.USERNAME_DEMO.equals(getUser().getName())) {
-			return Response.status(Status.UNAUTHORIZED).build();
+			return Response.status(Status.FORBIDDEN).build();
 		}
 		userService.unregister(getUser());
 		return Response.ok().build();