Should give an HTTP 4xx with an appropriate error instead.
Should give an HTTP 4xx with an appropriate error instead.