accept status code for custom error responses, set code in canAccess fallout response