bug: failed API requests return with mismatched HTTP status code and Content-Type for returned content

[TyIsI]

E.g. a failed authentication request returns below:

HTTP/2 200 
server: nginx/1.27.0
date: Mon, 25 Nov 2024 18:37:10 GMT
content-type: application/json
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
set-cookie: PHPSESSID=ueh3v2t87v042kjefp5jk1outo; path=/
vary: Origin
x-powered-by: PHP/7.4.15
strict-transport-security: max-age=31536000

Incorrect username or password

[TyIsI]

Fixed by #331

Will be mostly fixed in v2 api.