Returning 404 on /Security, instead of Controller.ss template

We shouldn't expose unsolicited content on public URLs,
mainly because it impacts SEO.