diff --git a/lib/browserid/views.js b/lib/browserid/views.js
index 1fc696fb6c90cd63d222e648afaec5f9364efeb9..ae9f3ecf22f8fd4f09e52c22880cdea5ce437568 100644
--- a/lib/browserid/views.js
+++ b/lib/browserid/views.js
@@ -173,7 +173,7 @@ exports.setup = function(app) {
   } else {
     // this is stage or production, explicitly disable all resources under /test
     app.get(/^\/test/, function(req, res) {
-      httputils.notFound("Cannot " + req.method + " " + req.url);
+      httputils.notFound(res, "Cannot " + req.method + " " + req.url);
     });
   }
 
diff --git a/lib/wsapi/stage_user.js b/lib/wsapi/stage_user.js
index ff1dd24bf03c10cee69671ba8ef0b80786c56db3..909d4d3dbb101daed1808699bd6b162028149fe3 100644
--- a/lib/wsapi/stage_user.js
+++ b/lib/wsapi/stage_user.js
@@ -59,7 +59,7 @@ exports.process = function(req, res) {
       if (err) {
         if (err.indexOf('exceeded') != -1) {
           logger.warn("max load hit, failing on auth request with 503: " + err);
-          return httputils.serviceUnavailable("server is too busy");
+          return httputils.serviceUnavailable(res, "server is too busy");
         }
         logger.error("can't bcrypt: " + err);
         return res.json({ success: false });