added 401 unauthorized http code where appropriate
change 401 to 403 on /api for api auth missing, added user auth check for 401
update swagger docs to include 401 and 403 error responses
changed 403 error to 409, added 500 and 501 errors
updated swagger, added 501 conditions where missing
more swagger updates
testing http status as second parameter
made http error code the second param in res.json() for version of express being used