fix: don't echo request back for unknown endpoints

closes #998

server/api/index.js

@@ -15,6 +15,7 @@ import team from './team';
 import integrations from './integrations';
 import notificationSettings from './notificationSettings';
 
+import { NotFoundError } from '../errors';
 import errorHandling from './middlewares/errorHandling';
 import validation from '../middlewares/validation';
 import methodOverride from './middlewares/methodOverride';
@@ -44,6 +45,9 @@ router.use('/', shares.routes());
 router.use('/', team.routes());
 router.use('/', integrations.routes());
 router.use('/', notificationSettings.routes());
+router.post('*', async (ctx, next) => {
+  ctx.throw(new NotFoundError('Endpoint not found'));
+});
 
 // Router is embedded in a Koa application wrapper, because koa-router does not
 // allow middleware to catch any routes which were not explicitly defined.