Why do invalid request options often show up as 500 instead of 400 in API routes?