this is not used anymore:
* not logged in users are redirected to the login page
* logged in users see the normal 404 page