Use 422 not 400 when validation fails