dont cast controller response; could be e.g. an ErrorObject