title: What's the appropriate HTTP status code when the request is missing a required cookie?
body: <p>I have an API endpoint and the request should have a cookie (not authentication). What would be the correct HTTP status code to return if it isn't present?   </p>
  
  <p>I would assume a <code>400</code> Bad Request would be the best.</p>