remove auth
throw a 404 if you navigate to a drug that doesnt exist