Added /favicon.ico to security URL exclude path.