Fixed csrf issue, add favicon.