return 500 for all unrelated URLs; upgraded to latest version of express