Tsyesikawell i mean i guess it depends what you might do, i think pump.io would produce a 400 in a lot of the cases you're thinking of but i could be wrong this ought to be defined in the spec in what situations you should produce 400 and 403 and such
