Error4xx page should be an error404 page. The error 403 (e.g., list a directory if enable_directory_listing no is configured) will show the error.lua page
Show syntax errors in .htpasswd files
Allow includes in htpasswd files