a list of allowed http status codes