fix perms
switch to HTML5 history API