error response should be JSON

Auditors: blackmad