only consider HTTP callback valid if we got a 200