move all publicly accesible resources to public directory and don't allow other files to be served arbitrarily (fixes #6)
fix things which were 404ing (either by adding them, or removing references to them)