return a form-error (with message) instead of HTTP-404