fixed issues
- links like http://arin.ga/index.php?b=../../../../../proc/cpuinfo were
  printing stuff about my filesystem
- fixed possible xss issue by adding a content type