added Authorization header in cors config
update favicon.ico