To test ------- - string to objectId cast may fail, must handle and throw 400 bad request back at the user/client
To test