only show reset password link when auth_internal is enabled (refs #681)
add a hack so that if floicon fails on some icon, it won't be processed again
attempt to recalculate favicon avg color if it changes
do not recalculate avg color repeatedly