Fix a few issues

* made CSS first class route
* inline the little bit of JS needed
* made HTTP headers on/off off by default