Add 401 page
Don't 404 on non-public pages

Invite signin instead, and give a 401 if denied.