send errors back as 400 responses