should say: "Server Error: 400 - Bad Request (/restricted.html is not an authorized path)"

should say: "Successful content from RESTRICTED.html"