This was already used in one other place, but I don't think the exception was handled at all.  Extending Http400 makes the no_exceptions middleware catch it.