(edit) uses res.sendStatus instead of res.send