make sure that invalid public files send back a 404