Return a 404, not a 500 on a verb mismatch

Fixes #1101