express POST with error handling