Don't leak request URL in admin API error messages (#792)