update settings in site module

- set safe mode to UNSAFE
- patch XHTML for font-based icons