basics of an auth system and 404 handling