throw 404 if called directly or given incorrect filename parameter