Your API resource does not allow deletion, and a client application attempted to delete the resource. What HTTP response code should you return?