add default 404 and clean up login process a bit