Return a 422 on validation errors.

This seems to be the consensus, so let's make this consistent.