Use custom error handler instead of default that leaks server info. - Use in API context - Use in default/web context - Add tests