No permission without 403 and Bad request without 404 fix