minor fix (added HttpResponseBadRequest)