An error response should *not* have a 200 HTTP status code. Please modify the code and the test so that it returns a 400 HTTP status code.