Apparently, the book RESTful Web Services suggests [using response code 400 for failed validation](http://stackoverflow.com/questions/3290182/rest-http-status-codes)