handle catchall for app and admin requests. Closes #10.