Update apache-shiro/src/main/webapp/WEB-INF/security.xml

remove ugly init url from server.com/favicon.ico to server.com/