return HTTP 400 (bad request) when site or email parameters are malformed, not 500 (internal server error).  issue #1429 issue #1423