Allow favicon through spring security