viewing a non-existent user now returns a 404