make seperate 404 for authed and no_authed