fix to use invalid_request with status code 400

see it: http://tools.ietf.org/html/rfc6749#section-5.2
Merge branch 'invalid_request_with_400' into patched