Yes, it should definitely be in the 400 space of HTML error codes. As 400 -> "You are incorrect" while 500 -> "We messed up".