Issue 64: add an audit trail

See #64 

In both `except` cases a redirect might be more reasonable.