changed all RuntimeException to HttpException with a bad request (aka 400) error code