direct access to favicon allowed.