Audit HttpError handling

[DanGould]

Some of the errors we expose are only Internal errors. I think we expose too many errors to the public interface. Adding an internal error type interface these up should make development easier since you'd not have to display each internal error into its own HTTP response, just 500.