action methods are throwing proper http exceptions