@Denis M Goddard
To enable git-ssb-web to log requests to stdout (just the request method & paths), either use git-ssb-web with CLI option --logging.level info, or put {"logging": {"level": "notice"} in your ~/.ssb/config.

The 403 thing is supposed to prevent DNS rebinding attack. You can disable that by using CLI option --public, or put {"public": true} in your ~/.ssb/config. That will put git-ssb-web in a read-only mode so it can be suitable for public access.