on 2nd thought, just catch all exceptions, log them, and return http 500