Return HTTP/JSON error codes and representations; remove Origin-header