replacing the default servlet with one that always returns a 404 to prevent files being loaded directly from disk