Return proper HTTP status code on error

Today nuxeo_error.jsp and nuxeo_error_security.jsp are returned with a HTTP code 200 which is problematic especially when these pages are returned for REST GET operations of files, in which case the client isn't aware that it's getting a corrupted result.

We must return proper 500 or 403 errors in these cases.