Push version to 5.0.4-dev
Security fix: SQL-Injection in URLs with param "id"