fix authorization and add 404 page