prevent high frequency refreshes
removed all locking for now
log all error responses
re-add license header, do not log literal contents