Return 403 (denied) instead of 500 (error) in system maintenance mode

[brianmajor]

The VOSpaceAuthorizer should throw an AccessControlException rather than an IllegalStateException when it finds that the system is in read-only or offline mode.