500 doesn't seem like a good response code for a validation error (same with test above)