cleanup(server.Handler): hide public fields

[bassosimone]

We initialize these fields using the constructor and then there's no real need to expose them to any consumer.

While there, fix a log message string.