returns HTTP 400 Bad Request when given an invalid json body