Use HTTP status codes for logged-in status