REST server accepts username/password requests, added custom 404 page