Write tracebacks to stderr instead of stdout.

This probably breaks CGI script error reporting (haven't checked), but if
it worked it first place it probably meant XSS (also haven't checked).
While documentation says "don't use stderr" I hope that no one will argue
about writing errors to error output :)

Fixes #713