added a 404 error page, redirect on invalid credentials, cleaned up the header issue I fixed up earlier, fought with a chrome bug, failed.