Do we really want to return 400 here? Is the JS client going to handle that?