Do not reveal sensitive information

When calling "/code/USER/TRANSPORT", there should be no way of gaining
information about the (non-)existance of accounts. So we silently discard
errors and always return HTTP 200.