allow HTML in app description to flow through unescaped
add favicon