restricted omniauth to only be used in production and added a favicon