fix unhandled exception (#473)

* handle error and return 400

* Update accounts.js

* Update accounts.js

* new test passing

lib/routes/api/utils.js

@@ -286,7 +286,11 @@ const hasAccountPermissions = async(req, res, next) => {
       message: 'insufficient privileges'
     });
   } catch (error) {
-    throw error;
+    // return 400 on errors
+    res.status(400).json({
+      status: 'fail',
+      message: error.message
+    });
   }
 };