adding HTTP codes
return response with a cookie in it