fixed error response to not leak info to users