404 if the user is not a web user