Benchmarks: Send back failure response, not 500

In case of failure, do not invoke onFailure(), instead construct a
response object with the error messages and set a flag indicating
failure.
Also make all action names public so that they can be tested by
security tests.