diff --git a/src/SolutionInfo.cs b/src/SolutionInfo.cs
index 59c75192b9..26e46eab0a 100644
--- a/src/SolutionInfo.cs
+++ b/src/SolutionInfo.cs
@@ -19,4 +19,4 @@ using System.Resources;
 
 // these are FYI and changed automatically
 [assembly: AssemblyFileVersion("0.5.0")]
-[assembly: AssemblyInformationalVersion("0.5.0-alpha001")]
+[assembly: AssemblyInformationalVersion("0.5.0-alpha002")]
diff --git a/src/Umbraco.Web.BackOffice/Controllers/EntityController.cs b/src/Umbraco.Web.BackOffice/Controllers/EntityController.cs
index 433cf6f345..1afe9bccf4 100644
--- a/src/Umbraco.Web.BackOffice/Controllers/EntityController.cs
+++ b/src/Umbraco.Web.BackOffice/Controllers/EntityController.cs
@@ -248,6 +248,7 @@ namespace Umbraco.Web.BackOffice.Controllers
         /// <param name="udi">UDI of the entity to fetch URL for</param>
         /// <param name="culture">The culture to fetch the URL for</param>
         /// <returns>The URL or path to the item</returns>
+       [DetermineAmbiguousActionByPassingParameters]
         public HttpResponseMessage GetUrl(Udi udi, string culture = "*")
         {
             var intId = _entityService.GetId(udi);
@@ -281,6 +282,7 @@ namespace Umbraco.Web.BackOffice.Controllers
         /// <remarks>
         /// We are not restricting this with security because there is no sensitive data
         /// </remarks>
+        [DetermineAmbiguousActionByPassingParameters]
         public HttpResponseMessage GetUrl(int id, UmbracoEntityTypes type, string culture = null)
         {
             culture = culture ?? ClientCulture();
diff --git a/src/Umbraco.Web.Common/Extensions/LinkGeneratorExtensions.cs b/src/Umbraco.Web.Common/Extensions/LinkGeneratorExtensions.cs
index 31ff07b964..f2babdb07c 100644
--- a/src/Umbraco.Web.Common/Extensions/LinkGeneratorExtensions.cs
+++ b/src/Umbraco.Web.Common/Extensions/LinkGeneratorExtensions.cs
@@ -54,7 +54,9 @@ namespace Umbraco.Extensions
         /// <returns></returns>
         public static string GetInstallerApiUrl(this LinkGenerator linkGenerator)
         {
-            return linkGenerator.GetPathByAction(nameof(InstallController.Index), ControllerExtensions.GetControllerName<InstallApiController>(), new { area = Constants.Web.Mvc.InstallArea }).EnsureEndsWith('/');
+            return linkGenerator.GetPathByAction(nameof(InstallApiController.GetSetup),
+                ControllerExtensions.GetControllerName<InstallApiController>(),
+                new { area = Constants.Web.Mvc.InstallArea }).TrimEnd(nameof(InstallApiController.GetSetup));
         }
 
         /// <summary>
diff --git a/src/Umbraco.Web.UI.NetCore/appsettings.json b/src/Umbraco.Web.UI.NetCore/appsettings.json
index ee67d0cf58..2044a8e696 100644
--- a/src/Umbraco.Web.UI.NetCore/appsettings.json
+++ b/src/Umbraco.Web.UI.NetCore/appsettings.json
@@ -1,60 +1,60 @@
 {
-    "ConnectionStrings": {
+  "ConnectionStrings": {
         "umbracoDbDSN": ""
-    },
-    "Umbraco": {
-        "CMS": {
-            "Content": {
-                "Notifications": {
-                    "Email": "your@email.here"
-                },
-                "MacroErrors": "throw"
-            },
-            "Global": {
-                "DefaultUILanguage": "en-us",
-                "HideTopLevelNodeFromPath": true,
-                "Path": "~/umbraco",
-                "TimeOutInMinutes": 20,
-                "UseHttps": false
-            },
-            "Hosting": {
-                "Debug": false
-            },
-            "KeepAlive": {
-                "DisableKeepAliveTask": false,
-                "KeepAlivePingUrl": "{umbracoApplicationUrl}/api/keepalive/ping"
-            },
-            "RequestHandler": {
-                "ConvertUrlsToAscii": "try"
-            },
-            "RuntimeMinification": {
-                "dataFolder": "App_Data\\Smidge",
-                "version": "1"
-            },
-            "Security": {
-                "KeepUserLoggedIn": false,
-                "UsernameIsEmail": true,
-                "HideDisabledUsersInBackoffice": false,
-                "UserPassword": {
-                    "RequiredLength": 10,
-                    "RequireNonLetterOrDigit": false,
-                    "RequireDigit": false,
-                    "RequireLowercase": false,
-                    "RequireUppercase": false,
-                    "MaxFailedAccessAttemptsBeforeLockout": 0
-                },
-                "MemberPassword": {
-                    "RequiredLength": 10,
-                    "RequireNonLetterOrDigit": false,
-                    "RequireDigit": false,
-                    "RequireLowercase": false,
-                    "RequireUppercase": false,
-                    "MaxFailedAccessAttemptsBeforeLockout": 0
-                }
-            },
-            "Tours": {
-                "EnableTours": true
-            }
+  },
+  "Umbraco": {
+    "CMS": {
+      "Content": {
+        "Notifications": {
+          "Email": "your@email.here"
+        },
+        "MacroErrors": "throw"
+      },
+      "Global": {
+        "DefaultUILanguage": "en-us",
+        "HideTopLevelNodeFromPath": true,
+        "Path": "~/umbraco",
+        "TimeOutInMinutes": 20,
+        "UseHttps": false
+      },
+      "Hosting": {
+        "Debug": false
+      },
+      "KeepAlive": {
+        "DisableKeepAliveTask": false,
+        "KeepAlivePingUrl": "{umbracoApplicationUrl}/api/keepalive/ping"
+      },
+      "RequestHandler": {
+        "ConvertUrlsToAscii": "try"
+      },
+      "RuntimeMinification": {
+        "dataFolder": "App_Data\\Smidge",
+        "version": "1"
+      },
+      "Security": {
+        "KeepUserLoggedIn": false,
+        "UsernameIsEmail": true,
+        "HideDisabledUsersInBackoffice": false,
+        "UserPassword": {
+          "RequiredLength": 10,
+          "RequireNonLetterOrDigit": false,
+          "RequireDigit": false,
+          "RequireLowercase": false,
+          "RequireUppercase": false,
+          "MaxFailedAccessAttemptsBeforeLockout": 5
+        },
+        "MemberPassword": {
+          "RequiredLength": 10,
+          "RequireNonLetterOrDigit": false,
+          "RequireDigit": false,
+          "RequireLowercase": false,
+          "RequireUppercase": false,
+          "MaxFailedAccessAttemptsBeforeLockout": 5
         }
+      },
+      "Tours": {
+        "EnableTours": true
+      }
     }
+  }
 }
diff --git a/src/Umbraco.Web/Editors/BackOfficeServerVariables.cs b/src/Umbraco.Web/Editors/BackOfficeServerVariables.cs
index 454338112c..bdcb93099b 100644
--- a/src/Umbraco.Web/Editors/BackOfficeServerVariables.cs
+++ b/src/Umbraco.Web/Editors/BackOfficeServerVariables.cs
@@ -73,7 +73,7 @@ namespace Umbraco.Web.Editors
             //this is the filter for the keys that we'll keep based on the full version of the server vars
             var keepOnlyKeys = new Dictionary<string, string[]>
             {
-                {"umbracoUrls", new[] {"authenticationApiBaseUrl", "serverVarsJs", "externalLoginsUrl", "currentUserApiBaseUrl"}},
+                {"umbracoUrls", new[] {"authenticationApiBaseUrl", "serverVarsJs", "externalLoginsUrl", "currentUserApiBaseUrl", "iconApiBaseUrl"}},
                 {"umbracoSettings", new[] {"allowPasswordReset", "imageFileTypes", "maxFileSize", "loginBackgroundImage", "canSendRequiredEmail", "usernameIsEmail"}},
                 {"application", new[] {"applicationPath", "cacheBuster"}},
                 {"isDebuggingEnabled", new string[] { }},