Switch order of 404/500 handlers, defence around error rendering, 15 sec timeout