replace new Error with carcass.httpError() and also use res.send() in stead of res.json()

Not knowing what might be the difference between `res.send()` and `res.json()`.