In Chrome it requests the favicon (for example) very frequently
which was causing a prompt for authentication where there was a
poorly considered regex in the rewrite rules. I think this is
a good backup to the rewrite rules to pass through on such files.