Updated docs, removed Favicon references from demos to clean logs, added URL and Header validation to Access control demo