test new behaviour returns HTTP 400