What happens when you overthink HTTP status codes and the security implications of leaking them from a REST API? This article digs into these topics.