return 404s when needed - fixes #8