'should return 400 for POST with invalid fields' tests added to relevant endpoints

Currently fails (and crashes app.js) due to how it is handled in the
model