xoff

- favicon
- authentication