use tempfiles with read access for group and user

This way it will be readable by apache when we move it into sth. real.
Merge pull request #68 from Crabgrass/bugfix/4201-add-banner-to-profile

Bugfix/4201 add banner to profile