adding bad request and forbidden responses