use log.Fatal for err