ssl friendly and also favicon!