Get rid of custom exceptions.
logging
Verification fails immediately if status is not OK.
Everything is unicode.
No need for preflight CORS.