support: 403/forbidden, support messages from server, support cancel, ensure requests don't stack up when cancelling