added '/404' and '/settings' route
fixed auth service authorize function