adding bad request to authCode, POST and PUT apis