send correct response code after request token creation #3