How should a POST route distinguish malformed JSON from server failures?