If your web server gives 200 as a response when the page is not present or the user is not authorized, then you need to use a different web server package. There are standards for these things for a reason. As talexb said already, don't confuse application conditions with protocol conditions.