now using whitelist instead of blacklist for secure actions, and adding rss/atom links to all category pages (not just home)