changed all render 404 lines to raise AccessDenied in all controllers