* fix: use query params on password auth * fix: refactor redirect and isUnauthorized * feat: add 404 page * fix: setup 404 as redirect and standalone page