allow violation reports to write http responses; document the example