Fix security hole on 404 page