Allow apps to expose a public area

This PR bypass the proxy authentification for requests under app's /public route, allowing them to expose pages and data to external visitors.