core blocks: core cleanup, added ability to send http headers 404 on not found and 403 on access denied