a few bug fixes, favicon, securing db/mail credentials