added favicon, 403 handling, profile page