Add some specs for when /api/evaluate should return BadRequest