Forward to secure action instead of 404