I think we're currently doing the wrong thing when we get an invalid form, but I can assert a 200 response instead.