change all routes to be shallow and require parameters
remove message show action
allow exceptions from bad requests for sake of simplicity