changed res.send to res.status, since send is deprecated