Use unprocessable_entity instead of bad_request for invalid data