use bad request if validation fails
add suffix specs