JSON errors are returned as 200/OK, better to use appropriate 400 codes