Updated http status codes
Added spec to test for unauthorized access