Custom 404 for unauthorized pages

[jans9000]

Currently, when pages are protected by a group header and the user is authenticated but not in the allowed group list, they get redirected to the generic 404 page. This is in conflict with the customized error page feature, which only seems to be working when the page does not exist at all.