Fixes #267

404 when request is not local. routes.axd should only be accessible in development.