error middleware now returns res.send()