Fix #437 #435

Oh... right.  You can't really get here form the GUI so forget AJAX.  Changing to 400 is reasonable, though, if it is the correct error message.