add 404 page and authorization