Fixed embedding

Fixed #1634

Also added some more defaults to protected urls.

Tweaked embedded styles, and also ignore user template when cached.