To allow access to the Sites directory, you have to add the following to /etc/apache2/httpd.conf:
1 | <DirectoryMatch "/Users/.*/Sites"> |
The default Apache configuration is set to denied on /, so you have to explicitly allow access to everything.