Improve SendStatus API, add URL and header validation to access control demo