add secret, decrypt, and 404 page