return 400 when querystring missing