Change status code to 400 from 403