use status().json() to avoid deprecation warnings