Improper ERROR code of expired urls when using mod_secdownload
When using mod_secdownload and a valid generated url times out, lighttpd returns error code 408.
This says the client to 'try again later', which is what eg. firefox does, requesting the same
expired url 4 times and then giving error to user.
The proper error code here would be 403 as described at http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html .
Also available in: Atom