allowed 404, 500 response codes