use 200 status code by default (for browsers)