Add /favicon.ico to unauthenticated routes, so it doesn't end up as the referrer when we log in with LDAP.