security revamp
use the right user
copy favicons
remove todo