fix branding, route cron mail, add msca shim