There was a bug back around v171-v173 whereby "remote commands" were disabled by default, which would result in a 403 error when attempted.

But that was fixed in v174, and works fine here. Do you have "khttpd_commands=0" in your config.ini file, perhaps?