Also, could consider logging an error or returning some sort of "invalid request" HTTP response?