ensure a content type for error responses; auth_token from either header or query parameter; log error responses as completion