Use the have_http_status matcher instead of be_

This has the advantage of being more explicit in the tests, and also
gives more informative output for test failures: you see the actual
value, rather than just 'false is not true'-type errors.