protecting staging routes, 404 message