fix possible xss on 404 page
use simple 404
save npm original package maintainers to npm_module_maintainer table. fixed #464
add v1.6.x-upgrade sql