improves error handling by reordering middleware

- less error log clutter (404s no-longer throw upstream)
favicon moved to root for browsers ignoring our <head>