Misleading title, this is more “RESTful standards”. Anyway, I enjoyed the content, you may differ http codes 401- not authorised, means you don’t have credentials- and 403- you are logged in, but don’t have permission for specified action.

Thank you.