the client should check the http code