if the backend failed, kill the response to not expose any information. this is not supposed to happen.