added favicon
updated tests to reflect changes to url paths
added simple auth token handler
now part of way to authenticate with system, no longer use session
removed absolute session module