Moved the no-auth uris to the oauthsettings