Fix #529

Two things here:

 - allow single asterisk MediaType when created from parsing
 - don't leak detailed error info into responses