Don't apply edit access control to signin routes

The controllers related to SSO (signin and SSO Push API) were being blocked
because the action names were not whitelisted, but this filter shouldn't be
applied to them.

The bug was introduced in 8f4f86382d4b5d0ec926add4fe06deebc31d013b