fixes doc typo, ignores JWTs for favicon reqs

Was seeing console output: `UnauthorizedError: ...` but getting 200 back. This is prob due to opening the endpoint in the browser, and the browser requesting the favicon. So added to unless list. https://github.com/auth0/express-jwt/issues/44