now the api responds a 400 on validation errors
user front end done, still some clean up to do