fix redirect bug when no final shash on homepage, pretty 404 page
move more work into the html preprocessor, implement update password