use 403 instead to avoid compat issues with swagger spec

Jellyfin.Api/Controllers/UserController.cs

@@ -332,7 +332,7 @@ public class UserController : BaseJellyfinApiController
         [FromRoute, Required] Guid userId,
         [FromBody, Required] UpdateUserEasyPassword request)
     {
-        return BadRequest("Deprecated");
+        return Forbid();
     }
 
     /// <summary>