'should return 400 for POST without required fields' tests added to relevant endpoints