404 instead 500
fix routes to 404 and remove new_session_path