started working on custom favicon, updated security model with inclusion