fix up a bunch of rendering bugs; make admin page not render without auth; 404 works properly, etc