minor changes
favicon.ico url dispatch
user serialization and compare_password prepare
working on security stuff