errors are obscure and leak implementation details

[rogpeppe]

When we can't unmarshal a request, the resulting error is verbose and leaks implementation details that it should not.

A recent example:

{
    "message":"cannot unmarshal parameters: cannot unmarshal into field: cannot unmarshal request body: json: cannot unmarshal string into Go value of type params.Token",
    "code":"bad request"
}