server: catch errors of run_stog, percent-decode request uri, update TODO