Fix to return 404 for non-existent presentations.
Add test that access outside presentation is blocked.