Error handling + merge from downstream SN RS.

  * valid_client now correctly differentiates between errors and
    invalid clients, even though the end result is the same (HTTP 500)
  * Added /review invalid client test
  * Merged stuff_nation resource_server.js code from downstream