include the secure token
add a staticpages controller
add test
finish static pages