setting http status code is now 'protected'