prohibit access to node_modules

fire error404 in response to access anything inside the node_modules folder