added input sanitizing and 404 handler

- the page parameter may only contain lowercase chars and numbers
- requests to unknown pages will be redirected to pages/error.php
- added config.php to .gitignore because it may contain sensitive data