basic http response handling (authorize)