[webapi] Improve exception message for zap security

- Use "error" instead of exception message