double unlock fix, and make sure a 404 is returned for missing file request