Allow theme to override favicon and sitemap

This is my suggested fix for #4597.  See that issue for details.

Rearrange the route setup order so that the theme-specified overrides
for favicon.ico and sitemap.xsl take priority over the defaults.

Theme overrides must be placed in the top level directory of that theme,
eg. 'content/themes/casper/favicon.ico'