replace PermissionDenied with Http404
dont use unicode_literals