navigation: different links for non-logged-in, logged-in and admin users
urls: return StatusNotFound (404) for unknown URLs