use constants instead of magic numbers for HTTP statuses