Maybe `400 Bad Request` is better?