ensure that the status code of NotFoundExceptions is always 404
more specific exceptions for authentication/authorization and state conflict errors