Returning 404 on #153 if absent

Was giving 500 when the session couldn't be found.
Returning 404 is much better.