next() and catch-all to return 404 for any malformed requests