[KYUUBI #2763] Expected error code for invalid basic/spnego authentication should be SC_FORBIDDEN

### _Why are the changes needed?_

To close #2763

### _How was this patch tested?_
- [ ] Add some test cases that check the changes thoroughly including negative and positive cases if possible

- [ ] Add screenshots for manual tests if appropriate

- [x] [Run test](https://kyuubi.apache.org/docs/latest/develop_tools/testing.html#running-tests) locally before make a pull request

Closes #2771 from lightning-L/kyuubi-2763.

Closes #2763

03300aa [Tianlin Liao] [KYUUBI #2763] expected error code for invalid basic/spnego authentication should be SC_FORBIDDEN

Authored-by: Tianlin Liao <tiliao@ebay.com>
Signed-off-by: Fei Wang <fwang12@ebay.com>

Author: lightning-L

kyuubi-server/src/main/scala/org/apache/kyuubi/server/http/authentication/AuthenticationFilter.scala

@@ -18,13 +18,12 @@
 package org.apache.kyuubi.server.http.authentication
 
 import java.io.IOException
+import javax.security.sasl.AuthenticationException
 import javax.servlet.{Filter, FilterChain, FilterConfig, ServletException, ServletRequest, ServletResponse}
 import javax.servlet.http.{HttpServletRequest, HttpServletResponse}
 
 import scala.collection.mutable.HashMap
 
-import org.apache.hadoop.security.authentication.client.AuthenticationException
-
 import org.apache.kyuubi.Logging
 import org.apache.kyuubi.config.KyuubiConf
 import org.apache.kyuubi.config.KyuubiConf.AUTHENTICATION_METHOD

kyuubi-server/src/test/scala/org/apache/kyuubi/operation/KyuubiRestAuthenticationSuite.scala

@@ -103,7 +103,7 @@ class KyuubiRestAuthenticationSuite extends RestFrontendTestHelper with Kerberiz
       .header(AUTHORIZATION_HEADER, s"BASIC $encodeAuthorization")
       .get()
 
-    assert(HttpServletResponse.SC_INTERNAL_SERVER_ERROR == response.getStatus)
+    assert(HttpServletResponse.SC_FORBIDDEN == response.getStatus)
   }
 
   test("test without authorization") {
@@ -135,7 +135,7 @@ class KyuubiRestAuthenticationSuite extends RestFrontendTestHelper with Kerberiz
       .header(AUTHORIZATION_HEADER, s"NEGOTIATE $encodeAuthorization")
       .get()
 
-    assert(HttpServletResponse.SC_INTERNAL_SERVER_ERROR == response.getStatus)
+    assert(HttpServletResponse.SC_FORBIDDEN == response.getStatus)
   }
 
   test("test with not supported auth scheme") {