Server: better, more secure error message