authenticate loaderio, return 400 when missing data