proper http error code, flesh out docs