added 404 not found header
security improvements