Comment by Kwpolska

403/404 seems to be the response to GET, not POST. In which case 405 Method Not Allowed would be better.