We have a REST service that incorrectly returns a 403 but will still allow login to get past it.  It'd be nice if I could somehow configure which HTTP response codes to intercept.