Server should handle status code, not php
Fixes lots of seccurity issues related to nginx configuration