You should do `return next(err)` here to pass the error to the next request handler. If it bubbles to the top, it will be properly reported as a 500.