For image/file theft, throw 404 instead of 500 error.