add mailer tests, add product page tests, fix security flaw