Instead show a 403 error, that looks better

Instead of using complicated options in the tornado settings that are
harder to express with the latest Jupyter versions, use the ingress
settings to set the headers for every requests. This will also ensure
that we don't forget some random page or sub-service from having the
correct headers

These are passed to the spawner so they can be reflected in the
Kubernetes objects accordingly