s4-auth: fixed status return