MWS: Anonymous access to favicon is broken

[Jermolene]

This bug was encountered with the commit e48ea2d.

Steps to reproduce:

1. Make a fresh install of MWS
2. Run npm install and npm start
3. Open localhost:8080 in a browser and observe that the favicons are not displayed correctly
4. In developer tools, observe that the server is returning 401 for the favicons, despite anonymous access being enabled

cc @webplusai

[Jermolene]

On further investigation it turns out that access to the wikis themselves is also blocked with 401. So I think anonymous access might be substantially broken.

[pmario]

@Jermolene -- Do you have "access right hierarchy" in mind. From my point of view it is a bit "out of control" at the moment. I know there is a bit of Specification /Reference at the mws docs, but from my point of view that's not specific enough to create a working system out of it.

We do have experience from TiddlySpace, which IMO worked quite well.
You also have a lot of experience with the Anna Freud Center -- From there you should know, what is "good enough" and what is "missing".