Make Events filtering more robust

[stevejalim]

As flagged in Sentry, we do reject bad params when people/bots put bad things into querystring params, but wondering whether it'd be nicer to not throw a full 500 and instead log it and send back a 400 Bad Request