Jonathan A. Sternberg 7a3bd19926 Properly use the 401 and 403 HTTP status codes ... According to the HTTP standard, a lack of authentication credentials or incorrect authentication credentials should send back a 401 (Unauthorized) with a `WWW-Authenticate` header with a challenge that can be used to authenticate. This is because a 401 status should be sent when an authentication attempt can be retried by the browser. The 403 (Forbidden) status code should be sent when authentication succeeded, but the user does not have the necessary authorization. Previously, the server would always send a 401 status code.		2016-07-07 20:30:04 -05:00
..
burn-in	Refactoring into root.	2014-10-21 23:32:19 -06:00
config.sample.toml	Properly use the 401 and 403 HTTP status codes	2016-07-07 20:30:04 -05:00