messed with secret token
add a StaticPages controller
finish static pages