More expressive errors on back-end

[timwis]

Here's an example of how to do that in koa: https://auth0.com/blog/building-and-securing-a-koa-and-angular2-app-with-jwt/