better 401 (unauthorized) and 403 (forbidden) handling
Support for one line change