1). The reason for this "HTTP 403 forbidden" error is because the URL for the pop-out notification has to be acknowledged by the Central Authentication Service (CAS).
2). Until CAS acknowledges this URL the UI will show a forbidden error within the pop-out window.
3). However once this URL has been acknowledged each time there-after the pop-out notification window will as expected display notifications.