Fix: the right status code here is `400`