Add 404 and 403 error pages to security-proxy

Note that we MUST add `/_static/` in front-end proxy, if exists, to provide CSS.