Clean up error reporting in API

If the error is a CFSSL error, display it in the API response with
an http 400 status.