ability to return http code 403 and 404 if so desired