404 on opml and password login does not work
I would check the permissions on your files to make sure they match the info on the documentation page, as well as making sure the owner is the lighttpd user, i think for debian, chown -R www-data:www-data <dir>