diff --git a/rest_configuration.cpp b/rest_configuration.cpp
index eb0d748948..0208aff5aa 100644
--- a/rest_configuration.cpp
+++ b/rest_configuration.cpp
@@ -862,7 +862,7 @@ int DeRestPluginPrivate::createUser(const ApiRequest &req, ApiResponse &rsp)
 
     if (!map.contains("devicetype")) // required
     {
-        rsp.list.append(errorToMap(ERR_MISSING_PARAMETER, QLatin1String("/"), QLatin1String("missing parameters in body")));
+        rsp.list.append(errorToMap(ERR_MISSING_PARAMETER, QLatin1String("/devicetype"), QLatin1String("missing parameters in body")));
         rsp.httpStatus = HttpStatusBadRequest;
         return REQ_READY_SEND;
     }
@@ -874,7 +874,7 @@ int DeRestPluginPrivate::createUser(const ApiRequest &req, ApiResponse &rsp)
         if ((map["username"].type() != QVariant::String) ||
             (map["username"].toString().length() < 10))
         {
-            rsp.list.append(errorToMap(ERR_INVALID_VALUE, QLatin1String("/"), QString("invalid value, %1, for parameter, username").arg(map["username"].toString())));
+            rsp.list.append(errorToMap(ERR_INVALID_VALUE, QLatin1String("/username"), QString("invalid value, %1, for parameter, username").arg(map["username"].toString())));
             rsp.httpStatus = HttpStatusBadRequest;
             return REQ_READY_SEND;
         }
@@ -2297,8 +2297,6 @@ int DeRestPluginPrivate::deleteUser(const ApiRequest &req, ApiResponse &rsp)
     std::vector<ApiAuth>::iterator i = apiAuths.begin();
     std::vector<ApiAuth>::iterator end = apiAuths.end();
 
-    // TODO compare error not found on hue bridge
-
     for (; i != end; ++i)
     {
         if (username2 == i->apikey && i->state == ApiAuth::StateNormal)
@@ -2318,8 +2316,10 @@ int DeRestPluginPrivate::deleteUser(const ApiRequest &req, ApiResponse &rsp)
         }
     }
 
-    rsp.str = "[]"; // empty
-    rsp.httpStatus = HttpStatusOk;
+    // TODO compare error not found on hue bridge
+    rsp.list.append(errorToMap(ERR_INVALID_VALUE, QString("/config/whitelist/%1").arg(username2), QString("invalid value, %1, key not found").arg(username2)));
+    rsp.httpStatus = HttpStatusNotFound;
+    
     return REQ_READY_SEND;
 }