Stop leaking information

[ajmcmiddlin]

This has been a bit of a POC up until now, but if hastile is going to get use we need to clean up a few things.

• Turn config route off, or at least put behind a debug flag
• Stop returning detailed errors in HTTP responses
  • Log detailed info and return a generic, user-friendly error

[newmana]

#9