title: REST HTTP Response status code to indicate client input is non-verified?
body: <p>We have POST API that gives particular user's contact details in response. But as this is confidential data, to access this detail, anyone accessing it needs to put verified mobile number.</p>
  
  <p>The request looks like:</p>
  
  <pre><code>POST /api/userdetails
  {
     "userid": 123,
     "mobile": "+1394839843"
  }
  </code></pre>
  
  <p>What should be status code if "mobile" number is not a verified number in our database? </p>