return bad response instead of a 500