How should a POST JSON endpoint classify malformed JSON vs internal errors?