cleaning + remove some security issue
avoid duplicate content: sending 404 header on 404 custom image