add favicon, tweak app.py to serve favicon
change grunt-tmp to grunt_tmp
add auth checking