Issue
If a server error is returned ("Error 500"), the json returned is accompanied by a field "message", that describes the error occurred. This is a security issue, particularly for production environment, because it is exposing server information.
This field should be removed and be used only internally in logs.