add 404, 500  session expired, duplicated login