http service: authorize error response