a 400 is fine, presumably when a user clicks on this link, there'll be a spinner which then returns a failure message if that happens