handling denied requests