- protected removal of owners from CSRF attacks
- added redirect to applications for site index when request is authenticated
- fixed page headers (should have <hr/> below and should equal page title)