@jystewart that post seems to only be relevant for JSONP, which we can easily detect from the query parameter.

Either way, we should ensure we're always using correct HTTP status codes for any cases other than JSONP (which is kind of a hack anyway).