Catch exceptions and return as 500 errors
approot
Request parameters without a request object?
More checking on parameters (minimum length etc)