Should be a JsonResponse, and a 400.