diff --git a/package.json b/package.json
index acc5e45c..3233a337 100644
--- a/package.json
+++ b/package.json
@@ -16,6 +16,7 @@
   "dependencies": {
     "@fastify/cookie": "9.3.1",
     "@fastify/formbody": "7.4.0",
+    "@fastify/sensible": "^5.6.0",
     "@fastify/static": "^7.0.4",
     "@fastify/websocket": "10.0.1",
     "@kitajs/fastify-html-plugin": "4.1.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e0eb59ab..1632925b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -11,6 +11,9 @@ dependencies:
   '@fastify/formbody':
     specifier: 7.4.0
     version: 7.4.0
+  '@fastify/sensible':
+    specifier: ^5.6.0
+    version: 5.6.0
   '@fastify/static':
     specifier: ^7.0.4
     version: 7.0.4
@@ -699,6 +702,18 @@ packages:
       mime: 3.0.0
     dev: false
 
+  /@fastify/sensible@5.6.0:
+    resolution: {integrity: sha512-Vq6Z2ZQy10GDqON+hvLF52K99s9et5gVVxTul5n3SIAf0Kq5QjPRUKkAMT3zPAiiGvoHtS3APa/3uaxfDgCODQ==}
+    dependencies:
+      '@lukeed/ms': 2.0.2
+      fast-deep-equal: 3.1.3
+      fastify-plugin: 4.5.1
+      forwarded: 0.2.0
+      http-errors: 2.0.0
+      type-is: 1.6.18
+      vary: 1.1.2
+    dev: false
+
   /@fastify/static@7.0.4:
     resolution: {integrity: sha512-p2uKtaf8BMOZWLs6wu+Ihg7bWNBdjNgCwDza4MJtTqg+5ovKmcbgbR9Xs5/smZ1YISfzKOCNYmZV8LaCj+eJ1Q==}
     dependencies:
@@ -2785,6 +2800,11 @@ packages:
     resolution: {integrity: sha512-GaqWWShW4kv/G9IEucWScBx9G1/vsFZZJUO+tD26M8J8z3Kw5RDQjaoZe03YAClgeS/SWPOcb4nkFBTEi5DUEA==}
     dev: true
 
+  /media-typer@0.3.0:
+    resolution: {integrity: sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==}
+    engines: {node: '>= 0.6'}
+    dev: false
+
   /memory-pager@1.5.0:
     resolution: {integrity: sha512-ZS4Bp4r/Zoeq6+NLJpP+0Zzm0pR8whtGPf1XExKLJBAczGMnSi3It14OiNCStjQjM6NU1okjQGSxgEZN8eBYKg==}
     dev: false
@@ -4183,6 +4203,14 @@ packages:
     engines: {node: '>=4'}
     dev: true
 
+  /type-is@1.6.18:
+    resolution: {integrity: sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==}
+    engines: {node: '>= 0.6'}
+    dependencies:
+      media-typer: 0.3.0
+      mime-types: 2.1.35
+    dev: false
+
   /typed-emitter@0.1.0:
     resolution: {integrity: sha512-Tfay0l6gJMP5rkil8CzGbLthukn+9BN/VXWcABVFPjOoelJ+koW8BuPZYk+h/L+lEeIp1fSzVRiWRPIjKVjPdg==}
     dev: false
@@ -4249,6 +4277,11 @@ packages:
   /util-deprecate@1.0.2:
     resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
 
+  /vary@1.1.2:
+    resolution: {integrity: sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==}
+    engines: {node: '>= 0.8'}
+    dev: false
+
   /vite-node@1.6.0(@types/node@20.12.7):
     resolution: {integrity: sha512-de6HJgzC+TFzOu0NTC4RAIsyf/DY/ibWDYQUcuEA84EMHhcefTUGkjFHKKEJhQN4A+6I0u++kr3l36ZF2d7XRw==}
     engines: {node: ^18.0.0 || >=20.0.0}
diff --git a/src/games/routes.ts b/src/games/routes.ts
index e4392fc2..0eaf9fd4 100644
--- a/src/games/routes.ts
+++ b/src/games/routes.ts
@@ -8,6 +8,7 @@ import { gameNumber } from './schemas/game-number'
 import { requestSubstitute } from './request-substitute'
 import { replacePlayer } from './replace-player'
 import { forceEnd } from './force-end'
+import { collections } from '../database/collections'
 
 export default fp(
   // eslint-disable-next-line @typescript-eslint/require-await
@@ -37,7 +38,13 @@ export default fp(
           },
         },
         async (request, reply) => {
-          reply.status(200).html(await GamePage(request.params.number, request.user))
+          const { number } = request.params
+          const game = await collections.games.findOne({ number })
+          if (!game) {
+            return reply.notFound()
+          }
+
+          reply.status(200).html(await GamePage({ game, user: request.user }))
         },
       )
       .put(
@@ -54,8 +61,7 @@ export default fp(
         },
         async (request, reply) => {
           if (!request.isAdmin) {
-            await reply.status(403).send()
-            return
+            return reply.forbidden()
           }
 
           const number = request.params.number
@@ -79,8 +85,7 @@ export default fp(
         },
         async (request, reply) => {
           if (!request.user) {
-            await reply.status(401).send()
-            return
+            return reply.unauthorized()
           }
 
           const number = request.params.number
@@ -101,8 +106,7 @@ export default fp(
         },
         async (request, reply) => {
           if (!request.isAdmin) {
-            await reply.status(403).send()
-            return
+            return reply.forbidden()
           }
 
           await forceEnd(request.params.number, request.user!.player.steamId)
diff --git a/src/games/views/html/game.page.tsx b/src/games/views/html/game.page.tsx
index 76745f12..bff5f191 100644
--- a/src/games/views/html/game.page.tsx
+++ b/src/games/views/html/game.page.tsx
@@ -1,7 +1,6 @@
 import { resolve } from 'node:path'
 import type { User } from '../../../auth/types/user'
-import { collections } from '../../../database/collections'
-import { GameState, type GameNumber } from '../../../database/models/game.model'
+import { GameState, type GameModel } from '../../../database/models/game.model'
 import { NavigationBar } from '../../../html/components/navigation-bar'
 import { Page } from '../../../html/components/page'
 import { Style } from '../../../html/components/style'
@@ -13,28 +12,23 @@ import { GameEventList } from './game-event-list'
 import { PlayerRole } from '../../../database/models/player.model'
 import { AdminActions } from './admin-actions'
 
-export async function GamePage(number: GameNumber, user?: User) {
-  const game = await collections.games.findOne({ number })
-  if (!game) {
-    throw new Error(`game not found: ${number}`)
-  }
-
+export async function GamePage(props: { game: GameModel; user?: User | undefined }) {
   return (
     <Layout
-      title={`game #${game.number}`}
+      title={`game #${props.game.number}`}
       head={<Style fileName={resolve(import.meta.dirname, 'style.css')} />}
     >
-      <NavigationBar user={user} />
+      <NavigationBar user={props.user} />
       <Page>
         <div class="container mx-auto grid grid-cols-4 gap-x-4 relative">
           <div class="order-first flex flex-col">
-            <GameSummary game={game} actor={user?.player.steamId} />
+            <GameSummary game={props.game} actor={props.user?.player.steamId} />
             <span class="col-span-2 mb-0 mt-8 text-2xl font-bold text-white">Game events</span>
-            <GameEventList game={game} />
+            <GameEventList game={props.game} />
           </div>
 
           <div class="col-span-3">
-            <GameSlotList game={game} actor={user?.player.steamId} />
+            <GameSlotList game={props.game} actor={props.user?.player.steamId} />
           </div>
 
           {[
@@ -42,14 +36,14 @@ export async function GamePage(number: GameNumber, user?: User) {
             GameState.configuring,
             GameState.launching,
             GameState.started,
-          ].includes(game.state) && user?.player.roles.includes(PlayerRole.admin) ? (
-            <AdminActions gameNumber={game.number} />
+          ].includes(props.game.state) && props.user?.player.roles.includes(PlayerRole.admin) ? (
+            <AdminActions gameNumber={props.game.number} />
           ) : (
             <></>
           )}
         </div>
       </Page>
-      <Footer user={user} />
+      <Footer user={props.user} />
     </Layout>
   )
 }
diff --git a/src/main.ts b/src/main.ts
index 3d6d12e9..93e9e0cb 100644
--- a/src/main.ts
+++ b/src/main.ts
@@ -9,6 +9,7 @@ const app = fastify({ logger })
 app.setSerializerCompiler(serializerCompiler)
 app.setValidatorCompiler(validatorCompiler)
 
+await app.register(await import('@fastify/sensible'))
 await app.register(await import('@fastify/formbody'))
 await app.register(await import('@fastify/cookie'), {
   secret: environment.AUTH_SECRET,
diff --git a/src/players/routes.ts b/src/players/routes.ts
index b43911c9..f4be168d 100644
--- a/src/players/routes.ts
+++ b/src/players/routes.ts
@@ -4,6 +4,7 @@ import { PlayerPage } from './views/html/player.page'
 import type { ZodTypeProvider } from 'fastify-type-provider-zod'
 import { z } from 'zod'
 import { steamId64 } from '../shared/schemas/steam-id-64'
+import { collections } from '../database/collections'
 
 export default fp(
   // eslint-disable-next-line @typescript-eslint/require-await
@@ -26,9 +27,15 @@ export default fp(
       },
       async (req, reply) => {
         const { steamId } = req.params
+        const player = await collections.players.findOne({ steamId })
+        if (!player) {
+          return reply.notFound(`player not found: ${steamId}`)
+        }
         reply
           .status(200)
-          .html(await PlayerPage(steamId, req.user, Number(req.query.gamespage) || 1))
+          .html(
+            await PlayerPage({ player, user: req.user, page: Number(req.query.gamespage) || 1 }),
+          )
       },
     )
   },
diff --git a/src/players/views/html/player.page.tsx b/src/players/views/html/player.page.tsx
index e51eed7b..3a979c64 100644
--- a/src/players/views/html/player.page.tsx
+++ b/src/players/views/html/player.page.tsx
@@ -1,11 +1,10 @@
 import type { User } from '../../../auth/types/user'
 import { collections } from '../../../database/collections'
-import type { SteamId64 } from '../../../shared/types/steam-id-64'
 import { Layout } from '../../../html/layout'
 import { NavigationBar } from '../../../html/components/navigation-bar'
 import { PlayerRole, type PlayerModel } from '../../../database/models/player.model'
 import { format } from 'date-fns'
-import { GameState, type GameModel } from '../../../database/models/game.model'
+import { GameState } from '../../../database/models/game.model'
 import { getPlayerGameCountOnClasses } from '../../get-player-game-count-on-classes'
 import { Tf2ClassName } from '../../../shared/types/tf2-class-name'
 import { GameClassIcon } from '../../../html/components/game-class-icon'
@@ -16,39 +15,39 @@ import { Page } from '../../../html/components/page'
 import { Footer } from '../../../html/components/footer'
 import { GameListItem } from '../../../games/views/html/game-list-item'
 import { Pagination, paginate } from '../../../html/components/pagination'
+import type { WithId } from 'mongodb'
 
 const gamesPerPage = 5
 
-export async function PlayerPage(steamId: SteamId64, user?: User, page = 1) {
-  const player = await collections.players.findOne({ steamId })
-  if (!player) {
-    throw new Error(`player not found: ${steamId}`)
-  }
-
-  const skip = (page - 1) * gamesPerPage
+export async function PlayerPage(props: {
+  player: WithId<PlayerModel>
+  user?: User | undefined
+  page: number
+}) {
+  const skip = (props.page - 1) * gamesPerPage
 
   const games = await collections.games
     .find(
-      { 'slots.player': player._id },
+      { 'slots.player': props.player._id },
       { limit: gamesPerPage, skip, sort: { 'events.0.at': -1 } },
     )
     .toArray()
 
   const { last, around } = paginate(
-    page,
+    props.page,
     gamesPerPage,
-    await collections.games.countDocuments({ 'slots.player': player._id }),
+    await collections.games.countDocuments({ 'slots.player': props.player._id }),
   )
 
   const gameCount = await collections.games.countDocuments({
-    $and: [{ state: GameState.ended }, { ['slots.player' as keyof GameModel]: player._id }],
+    $and: [{ state: GameState.ended }, { ['slots.player']: props.player._id }],
   })
 
-  const gameCountOnClasses = await getPlayerGameCountOnClasses(player._id)
+  const gameCountOnClasses = await getPlayerGameCountOnClasses(props.player._id)
 
   return (
     <Layout
-      title={player.name}
+      title={props.player.name}
       head={
         <>
           <Style fileName={resolve(import.meta.dirname, 'style.css')} />
@@ -58,11 +57,11 @@ export async function PlayerPage(steamId: SteamId64, user?: User, page = 1) {
         </>
       }
     >
-      <NavigationBar user={user} />
+      <NavigationBar user={props.user} />
       <Page>
         <div class="container mx-auto mt-12 flex flex-col gap-[30px] p-2 lg:p-0">
           <PlayerPresentation
-            player={player}
+            player={props.player}
             gameCount={gameCount}
             gameCountOnClasses={gameCountOnClasses}
           />
@@ -72,20 +71,20 @@ export async function PlayerPage(steamId: SteamId64, user?: User, page = 1) {
             {games.map(game => (
               <GameListItem
                 game={game}
-                classPlayed={game.slots.find(s => s.player.equals(player._id))!.gameClass}
+                classPlayed={game.slots.find(s => s.player.equals(props.player._id))!.gameClass}
               />
             ))}
           </div>
 
           <Pagination
-            hrefFn={page => `/players/${player.steamId}?gamespage=${page}`}
+            hrefFn={page => `/players/${props.player.steamId}?gamespage=${page}`}
             lastPage={last}
-            currentPage={page}
+            currentPage={props.page}
             around={around}
           />
         </div>
       </Page>
-      <Footer user={user} />
+      <Footer user={props.user} />
     </Layout>
   )
 }